Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:npm/ng-packagr@5.3.0
purl pkg:npm/ng-packagr@5.3.0
Next non-vulnerable version 10.1.1
Latest non-vulnerable version 10.1.1
Risk 3.1
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-5vgn-qq4u-wqfv
Aliases:
CVE-2020-7735
GHSA-qm28-7hqv-wg5j
OS Command Injection The package ng-packagr is vulnerable to Command Injection via the `styleIncludePaths` option.
10.1.1
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-06-04T20:39:19.802111+00:00 GitLab Importer Affected by VCID-5vgn-qq4u-wqfv https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/ng-packagr/CVE-2020-7735.yml 38.6.0